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I have attached completed Form PTO/SB/08(A&B) and copies of the references sited 
thereon. Please consider the following comments on the most relevant references: 

Weissmann does not teach the capture, storage, and retrieval, of user input sequences. 
Weissmann teaches logon via a "portal computer" "in accordance with a series of 
message definitions of the retrieved logon information". (See claim 1 .) 

Hsieh does not teach single sign-on for public Web services. Instead Hsieh teaches 
single sign-on for "application programs" "in a company or an organization" (see 
paragraph 4) via a network that "may be a private network, a local area network (LAN) 
or a wide area network (WAN)" (see paragraph 10). 

In both of his patents, Boroditsky does not teach the capture, storage, and retrieval, of 
user input sequences. Instead Boroditsky's "invention includes the step of using the 
user's manipulations) of symbol(s) to generate a CodeKey" (see column 3 of either 
patent). Furthermore, Boroditsky does not teach single sign-on for public Web services. 

Fang does not teach single sign-on for public Web services. Instead Fang teaches single 
sign-on "in a computer enterprise environment" (see claims 1 , 1 1 , 21 , and 25). 
Furthermore, Fang does not teach retrieval of sign-on information for each service as 
needed, but instead teaches "to retrieve the targets of a given user" all at once (see claiml 
and similar phrasing in claims 1 1, 21, 25, and 29). 

Cohen does not teach single sign-on for public Web services. Instead Cohen teaches 
single sign-on "in a computer enterprise environment" (see claim 1) or "in a distributed 
computer enterprise" (see claims 9, 15, and 21). 
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Brezak appears to describe Microsoft's Passport method, which is discussed in 
Applicant's specification. 

Belapurkar does not teach single sign-on for public Web services. Instead, Belapurkar 
teaches an improvement to an "enterprise access management system" (see claims 1, 6, 
12, 21, 30, and 31). 
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